Arch Linux User Repository

If you want to use old pulse-secure client 9.1r9, please download the following package.

https://drive.google.com/file/d/1_8tRA-T9vV08n_TpHqdcG5IvalxBuZ7_/view?usp=sharing

The rewritten pulse-secure client requires a service called 'pulsesecure'. Please enable and start the service before running the client.

Is there any way this can be updated to 9.1r12? I believe that version fixes the pulseUI MFA issue. That's the current issue I am having where after approving the MFA sign-in, it re-directs right back to the sign-in window

Please update download URL (source_x86_64) to the official download URL from the Pulse Secure website.

For the current version, that would be:

source_x86_64=("https://application.ivanti.com/SSG/Clients/ps-pulse-linux-9.1r11.4-b8575-64-bit-installer.rpm")

(md5sums_x86_64 stays the same.)

Here is how you can see that the above is actually the official URL:

1. https://www.pulsesecure.net/
2. Click FREE TRIAL -> https://www.pulsesecure.net/trynow/
3. Click → Looking for Pulse Client to download? -> https://www.ivanti.com/lp/security/trials/client-download -> redirects to https://www.ivanti.com/lp/security/trials/pulse-client (Apparently, Ivanti bought Pulse Secure in 2020)
4. Fill in the form with something and Submit -> redirects to https://www.ivanti.com/ty/security/trial/pulse-client
5. Copy URL from relevant download button.

Shortcut for getting download URL:s later, without web browser or forms:

curl -s https://www.ivanti.com/ty/security/trial/pulse-client | awk -F '"' '/application.ivanti.com/{print $4}'

Thanks!

@Syzygianinfern0

This will fix SSL Cert issue connecting to VPN server Otherwise, you might see following message:

You are about to authenticate to an untrusted server.
There are problems with the site's security certificate
Certificate Error
Should Pulse continue to connect?
[Ok] [Cancel]

@tchung What does this fix?

In my case (Manjaro 21 Gnome), I had to:

$ pkill pulseUI
$ sudo mkdir -p /var/lib/pulsesecure/pulse
$ sudo trust extract-compat
$ sudo mkdir -p /etc/pki/ca-trust/extracted/openssl
$ sudo ln -s /etc/ca-certificates/extracted/ca-bundle.trust.crt /etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt
$ systemctl restart pulsesecure.service

Am I correct in assuming that updating this package means "google search some random site that allows public downloads?" If so, then http://webdev.web3.technion.ac.il/docs/cis/public/ssl-vpn/ps-pulse-centos-rhel.rpm appears to have the latest version. (9.1.11.8575)

If you have a DNS service enabled (such as systemd-resolvd) the VPN won't work: it'll claim to be connected, but won't route traffic properly. You will need to use NetworkManager's builtin DNS resolver instead. If you're using a DNS service currently, to switch back you'll need to not only disable the service but also remove /etc/resolv.conf. NetworkManager will see the symlink in /etc/resolv.conf and still think you're using a separate DNS service otherwise.

Hi @Syzygianinfern0,

I left a comment here: https://community.pulsesecure.net/t5/Pulse-Connect-Secure/Pulse-r9-1-embedded-browser-install-failure-Mint-Linux/m-p/45451/highlight/true#M28892

Based on strace run, seems like there's a bug in pulse-secure 9.1r11.0.

The VPN works fine but after a few minutes of connection, it disconnects and the VPN profile that was added is deleted as well. Are there any logs that I can share to debug this issue? Or is it a known issue?

Installed pulse-secure9.1r11, and followed the setup instructions as mentioned by @andrea.denisse and @thecrow. But, still have issues with PulseUI, keeps refreshing the login screen where it asks for the second factor auth. Doesn't go forward to host checking and establishing VPN.